dhoelzer/ShowMeThePackets

Stars
195
Rank 199,374 (Top 4 %)
Language
Jupyter Notebook
License
GNU General Publi...
Created over 6 years ago
Updated 7 months ago

dhoelzer/ShowMeThePackets

dhoelzer

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Useful network monitoring, analysis, and active response tools used or mentioned in the SANS SEC503 course (https://www.sans.org/course/intrusion-detection-in-depth)

ShowMeThePackets

Useful network monitoring, analysis, and active response tools used or mentioned in the SANS SEC503 course (https://www.sans.org/course/intrusion-detection-in-depth)

Slack Channel and related public challenges available from http://www.showmethepackets.com

DAD

Log aggregation, analysis, alerting and correlation for Windows, Syslog and text based logs.

AuditcastsScripts

Handy scripts developed and discussed on http://auditcasts.com

VisualSniff

A reimplementation of the EtherApe style display for OS X. Note that this is not a fork of EtherApe. Written in a kinder, gentler, age when Objective-C had not yet been supplanted with this Swift nonsense.

Silky

Web interface for monitoring and interacting with Netflow data stored in Silk repositories.

DavesPythonFails

This repository contains various examples, data, and other files used and/or discussed on David Hoelzer's SANS Cyberdefense LiveStream. Topics typically include Machine Learning, Data Science, Artificial Intelligence, and Cyber Security.

Jupyter Notebook

SEC595_Extras

Extras for the SANS Applied Data Science and Machine Learning for Information Security Professionals course

Jupyter Notebook

archive

Proof of concept archiving tool that allows for the creation of arbitrary metadata within the web interface.

uportal

Open source UNIX implementation of the MIP (Mud Information Protocol) used by 3Kingdoms MUD and the Portal client.

Matchismo

Solution to Paul Hegarty's CS193P Matchismo homework, but with card backs and fronts.